Crmeb Java vulnerabilities

• crmeb java crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints CVE-2026-111354 2.3 LowOctober 15, 2026
• crmeb java crmeb crmeb_java base64 Qrcode Endpoint RestTemplateUtil.java RestTemplate.getForEntity server-side request forgery CVE-2026-10771 6.9 MediumJune 3, 2026
• crmeb java crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the... CVE-2024-33117 5.3 MediumMay 6, 2024
• crmeb java SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute... CVE-2024-28714 8.1 HighMarch 28, 2024
• crmeb java SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL... CVE-2024-24110 6.5 MediumFebruary 29, 2024
• crmeb java SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to... CVE-2024-25469 7.5 HighFebruary 23, 2024
• crmeb java, zhong bang crmeb java +1 more Zhong Bang CRMEB Java save cross site scripting CVE-2023-1609 3.5 LowMarch 23, 2023
• crmeb java, zhong bang crmeb java +1 more Zhong Bang CRMEB Java list getAdminList sql injection CVE-2023-1608 6.3 MediumMarch 23, 2023
• crmeb java CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list. CVE-2023-25223 7.2 HighMarch 7, 2023